CVE-2023-2925

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-2925

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2925.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-2925

Published

2023-05-27T08:31:02.986Z

Modified

2026-08-07T11:31:04.982500431Z

Severity

2.4 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

Webkul krayin crm Edit Person Page 2 cross site scripting

Details

A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/organizations/edit/2 of the component Edit Person Page. The manipulation of the argument Organization leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230079. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2925.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.2.4"
                },
                {
                    "last_affected": "1.2.4"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-79"
    ]
}

References

Affected packages

Git / github.com/krayin/laravel-crm

Affected ranges

Type

GIT

Repo

https://github.com/krayin/laravel-crm

Events

Introduced

047292b8f98f1c3db43c44a53d86cd247b8f4e5e

Last affected

047292b8f98f1c3db43c44a53d86cd247b8f4e5e

Database specific

{
    "extracted_events": [
        {
            "introduced": "1.2.4"
        },
        {
            "last_affected": "1.2.4"
        }
    ],
    "cpe": "cpe:2.3:a:webkul:krayin_crm:1.2.4:*:*:*:*:*:*:*",
    "source": "CPE_STRING"
}

Affected versions

1.*

1.2.4

v1.*

v1.2.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2925.json"